$ rpki-client -vvf repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft File: 286C9A362D81776DD721F49AC1EDBE51BF15D486.mft (raw, json) Hash identifier: Z5MINkTWqvUEsrZeQWzJnSu74ACPLI1EbZa/uXztKOk= Subject key identifier: AD:9D:31:33:0E:8F:C7:3B:23:B5:0D:A5:24:1B:AB:5D:45:AD:E9:6D Authority key identifier: 28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 Certificate issuer: /CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Certificate serial: 13522D4B57DAD5118E2907AE220C0BAECD30C04F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft Manifest number: 011C Signing time: Sun 19 May 2024 17:01:06 +0000 Manifest this update: Sun 19 May 2024 16:56:06 +0000 Manifest next update: Thu 23 May 2024 00:43:06 +0000 Files and hashes: 1: 286C9A362D81776DD721F49AC1EDBE51BF15D486.crl (hash: rSEc3nDUVAt4cHLRWzeI75Md2AB2xyOPSduHmDeWnis=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.crl rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 19:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:52:2d:4b:57:da:d5:11:8e:29:07:ae:22:0c:0b:ae:cd:30:c0:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Validity Not Before: May 19 16:56:06 2024 GMT Not After : May 23 00:43:06 2024 GMT Subject: CN=AD9D31330E8FC73B23B50DA5241BAB5D45ADE96D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8c:7e:c2:f5:43:ef:8b:7a:92:05:08:0a:b2: 6d:fd:c2:4e:d6:22:8e:d0:82:e6:1d:85:4e:a2:0a: 8f:be:00:e5:d3:5f:2a:f7:64:d7:80:0f:5c:35:a1: 2f:4c:3e:97:42:4a:2d:31:78:10:4f:6f:6d:28:db: 0c:3b:69:98:cf:a8:c1:bb:3d:fc:a4:fc:6c:ef:95: bd:09:7b:76:18:2c:d7:f7:30:22:7b:81:7d:21:24: 2d:e2:13:c4:e9:71:4e:9e:54:84:21:09:dd:1e:49: dc:66:7b:c1:df:0c:06:5f:28:1f:03:05:2d:ae:bb: 52:38:87:91:47:38:65:81:08:40:7a:ee:a2:8e:e0: b7:af:7f:c7:43:bf:8a:12:c1:dd:2f:c2:dc:60:d0: 97:8f:5b:87:3f:fa:de:2f:c2:b6:dc:91:8d:3c:12: 28:41:5c:53:f8:f1:af:08:d0:44:1c:a5:1f:57:80: db:52:8f:08:a6:0f:1f:3f:32:d9:a9:99:d7:77:3a: dd:3b:55:b1:b6:bf:61:18:b2:c0:26:b7:46:08:6b: cd:c0:20:44:0c:2f:96:dd:6c:96:bf:ee:60:52:1b: 3e:9b:71:e2:7b:c6:73:80:8f:e6:51:6c:29:49:be: fd:ce:78:e9:1f:c8:13:23:ca:2e:40:ca:f3:98:17: e0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:9D:31:33:0E:8F:C7:3B:23:B5:0D:A5:24:1B:AB:5D:45:AD:E9:6D X509v3 Authority Key Identifier: keyid:28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:a8:ce:0c:71:2f:e2:9b:59:c8:3c:84:ab:e0:13:10:5b:3d: b6:11:91:8e:c9:7f:49:e5:db:5c:91:b8:3e:ca:ae:0d:88:99: ad:3b:ac:b7:51:3e:42:f3:f2:a2:d7:24:d2:d7:1f:5a:23:74: 95:98:8b:c6:10:6e:22:49:7a:82:ca:35:b4:be:16:00:32:c9: 88:97:81:6d:17:db:2f:22:8a:73:13:fc:21:88:e4:7d:d0:ec: 93:33:96:b7:4b:e1:9b:49:c1:ef:20:87:28:37:6d:b3:d0:c0: 36:2f:0b:12:ce:a1:7a:7f:2d:e9:19:a3:92:54:a5:ff:9c:3d: 7b:3e:a1:9b:25:77:c6:b5:36:6f:e6:88:c7:55:7d:78:b8:ca: 3a:18:85:23:96:f1:df:59:7d:62:7e:36:af:ab:c6:19:fe:cc: 37:31:33:6a:91:bd:ea:95:06:50:4a:84:0c:ce:e8:67:2e:d4: 04:52:ba:e4:75:d5:f6:9f:13:1a:85:a4:6a:6c:73:03:04:6c: 92:69:88:00:39:33:e1:21:0e:95:fc:e4:ac:3d:b4:c5:bc:f2: 45:43:7f:f8:2b:58:5b:59:6c:40:62:58:4c:b4:2d:89:f2:2c: e1:3c:3a:e1:bf:90:e1:fb:69:e7:ec:c5:43:3e:8a:f2:ef:78: 3a:98:2b:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE1ItS1fa1RGOKQeuIgwLrs0wwE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJFNTFC RjE1RDQ4NjAeFw0yNDA1MTkxNjU2MDZaFw0yNDA1MjMwMDQzMDZaMDMxMTAvBgNV BAMTKEFEOUQzMTMzMEU4RkM3M0IyM0I1MERBNTI0MUJBQjVENDVBREU5NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7jH7C9UPvi3qSBQgKsm39wk7W Io7QguYdhU6iCo++AOXTXyr3ZNeAD1w1oS9MPpdCSi0xeBBPb20o2ww7aZjPqMG7 Pfyk/Gzvlb0Je3YYLNf3MCJ7gX0hJC3iE8TpcU6eVIQhCd0eSdxme8HfDAZfKB8D BS2uu1I4h5FHOGWBCEB67qKO4Levf8dDv4oSwd0vwtxg0JePW4c/+t4vwrbckY08 EihBXFP48a8I0EQcpR9XgNtSjwimDx8/Mtmpmdd3Ot07VbG2v2EYssAmt0YIa83A IEQML5bdbJa/7mBSGz6bceJ7xnOAj+ZRbClJvv3OeOkfyBMjyi5AyvOYF+B7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrZ0xMw6PxzsjtQ2lJBurXUWt6W0wHwYDVR0j BBgwFoAUKGyaNi2Bd23XIfSawe2+Ub8V1IYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjEyNzRjNi03ODNjLTRmM2QtYTliNi03NWIzYjQ2Zjg1NGMvMC8yODZDOUEzNjJE ODE3NzZERDcyMUY0OUFDMUVEQkU1MUJGMTVENDg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJFNTFCRjE1 RDQ4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmYxMjc0YzYtNzgzYy00ZjNkLWE5 YjYtNzViM2I0NmY4NTRjLzAvMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJF NTFCRjE1RDQ4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFuozgxxL+KbWcg8hKvgExBbPbYRkY7Jf0nl 21yRuD7Krg2Ima07rLdRPkLz8qLXJNLXH1ojdJWYi8YQbiJJeoLKNbS+FgAyyYiX gW0X2y8iinMT/CGI5H3Q7JMzlrdL4ZtJwe8ghyg3bbPQwDYvCxLOoXp/LekZo5JU pf+cPXs+oZsld8a1Nm/miMdVfXi4yjoYhSOW8d9ZfWJ+Nq+rxhn+zDcxM2qRveqV BlBKhAzO6Gcu1ARSuuR11fafExqFpGpscwMEbJJpiAA5M+EhDpX85Kw9tMW88kVD f/grWFtZbEBiWEy0LYnyLOE8OuG/kOH7aefsxUM+ivLveDqYK4E= -----END CERTIFICATE-----Generated at Sun May 19 17:20:42 2024 by rpki-client on console-fra.rpki-client.org